Oracle MySQL vulnerabilities
1,328 known vulnerabilities affecting oracle/mysql.
Total CVEs
1,328
CISA KEV
0
Public exploits
50
Exploited in wild
0
Severity breakdown
CRITICAL12HIGH71MEDIUM1064LOW181
Vulnerabilities
Page 45 of 67
CVE-2016-3495MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.132016-10-25
CVE-2016-3495 [MEDIUM] CVE-2016-3495: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
nvd
CVE-2016-5628MEDIUMCVSS 4.9≤ 5.7.132016-10-25
CVE-2016-5628 [MEDIUM] CVE-2016-5628: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML.
nvd
CVE-2016-5635MEDIUMCVSS 4.9≤ 5.7.132016-10-25
CVE-2016-5635 [MEDIUM] CVE-2016-5635: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Audit.
nvd
CVE-2016-8284LOWCVSS 1.8≥ 5.6.0, ≤ 5.6.31≥ 5.7.0, ≤ 5.7.132016-10-25
CVE-2016-8284 [LOW] CVE-2016-8284: Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local use
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows local users to affect availability via vectors related to Server: Replication.
nvd
CVE-2016-8288LOWCVSS 3.1≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-10-25
CVE-2016-8288 [LOW] CWE-284 CVE-2016-8288: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB Plugin.
nvd
CVE-2016-8286LOWCVSS 3.1≤ 5.7.142016-10-25
CVE-2016-8286 [LOW] CWE-200 CVE-2016-8286: Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to af
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to affect confidentiality via vectors related to Server: Security: Privileges.
nvd
CVE-2016-6662CRITICALCVSS 9.8PoC≥ 5.5.0, ≤ 5.5.52≥ 5.6.0, ≤ 5.6.33+1 more2016-09-20
CVE-2016-6662 [CRITICAL] CWE-264 CVE-2016-6662: Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51,
Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting genera
nvd
CVE-2016-3477HIGHCVSS 8.1≥ 5.5.0, ≤ 5.5.49≥ 5.6.0, ≤ 5.6.30+1 more2016-07-21
CVE-2016-3477 [HIGH] CVE-2016-3477: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and ear
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser.
nvd
CVE-2016-3471HIGHCVSS 7.5≥ 5.5.0, ≤ 5.5.45≥ 5.6.0, ≤ 5.6.262016-07-21
CVE-2016-3471 [HIGH] CVE-2016-3471: Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local use
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
nvd
CVE-2016-3440HIGHCVSS 7.7≤ 5.7.112016-07-21
CVE-2016-3440 [HIGH] CVE-2016-3440: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to af
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
nvd
CVE-2016-5443MEDIUMCVSS 4.7≤ 5.7.122016-07-21
CVE-2016-5443 [MEDIUM] CVE-2016-5443: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availabili
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows local users to affect availability via vectors related to Server: Connection.
nvd
CVE-2016-3459MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-07-21
CVE-2016-3459 [MEDIUM] CVE-2016-3459: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.
nvd
CVE-2016-5439MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-07-21
CVE-2016-5439 [MEDIUM] CVE-2016-5439: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote ad
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Privileges.
nvd
CVE-2016-3615MEDIUMCVSS 5.3≥ 5.5.0, ≤ 5.5.49≥ 5.6.0, ≤ 5.6.30+1 more2016-07-21
CVE-2016-3615 [MEDIUM] CVE-2016-3615: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and ear
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.
nvd
CVE-2016-3521MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.49≥ 5.6.0, ≤ 5.6.30+1 more2016-07-21
CVE-2016-3521 [MEDIUM] CVE-2016-3521: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and ear
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.
nvd
CVE-2016-5436MEDIUMCVSS 4.9≤ 5.7.122016-07-21
CVE-2016-5436 [MEDIUM] CVE-2016-5436: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.
nvd
CVE-2016-5440MEDIUMCVSS 4.9≥ 5.5.0, ≤ 5.5.49≥ 5.6.0, ≤ 5.6.30+1 more2016-07-21
CVE-2016-5440 [MEDIUM] CVE-2016-5440: Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and ear
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR.
nvd
CVE-2016-5441MEDIUMCVSS 4.9≤ 5.7.122016-07-21
CVE-2016-5441 [MEDIUM] CVE-2016-5441: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.
nvd
CVE-2016-3614MEDIUMCVSS 5.3≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-07-21
CVE-2016-3614 [MEDIUM] CVE-2016-3614: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption.
nvd
CVE-2016-5442MEDIUMCVSS 4.9≤ 5.7.122016-07-21
CVE-2016-5442 [MEDIUM] CVE-2016-5442: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Security: Encryption.
nvd